From 7b337c9192cee2d1a09ff9ce8ad5609184ca4f38 Mon Sep 17 00:00:00 2001 From: Timofei Kachalov Date: Mon, 7 Sep 2026 21:55:13 +0400 Subject: [PATCH] `Remove runner IP authorization/revocation on the warehouse security group from the production deploy workflow` --- .github/workflows/deploy-production.yml | 15 --------------- 1 file changed, 15 deletions(-) diff --git a/.github/workflows/deploy-production.yml b/.github/workflows/deploy-production.yml index da53bb13..f8e097cd 100644 --- a/.github/workflows/deploy-production.yml +++ b/.github/workflows/deploy-production.yml @@ -31,13 +31,6 @@ jobs: id: runner-ip run: echo "ip=$(curl -s https://checkip.amazonaws.com)" >> "$GITHUB_OUTPUT" - - name: Authorize runner IP on the warehouse security group - run: | - aws ec2 authorize-security-group-ingress \ - --group-id ${{ secrets.SHOPPY_DB_SECURITY_GROUP_ID }} \ - --protocol tcp --port ${{ vars.SHOPPY_DB_PORT }} \ - --cidr ${{ steps.runner-ip.outputs.ip }}/32 - - name: Ensure that Esno executable is ready run: yarn install --cwd api --frozen-lockfile @@ -48,14 +41,6 @@ jobs: cd api && yarn db:initialize - - name: Revoke runner IP from the warehouse security group - if: always() - run: | - aws ec2 revoke-security-group-ingress \ - --group-id ${{ secrets.SHOPPY_DB_SECURITY_GROUP_ID }} \ - --protocol tcp --port ${{ vars.SHOPPY_DB_PORT }} \ - --cidr ${{ steps.runner-ip.outputs.ip }}/32 - deploy-to-vercel: needs: [ deploy ] uses: ./.github/workflows/deploy-to-vercel.yml